Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/1uN-f7Pe3Yoax_Gy67R47bHTZtU.roa
File: 1uN-f7Pe3Yoax_Gy67R47bHTZtU.roa (raw, json)
Hash identifier: MsQhz6+if76h/AmIW7u+uBAwg92G7zeCMFsByKAoJ9g=
Subject key identifier: D6:E3:7E:7F:B3:DE:DD:8A:1A:C7:F1:B2:EB:B4:78:ED:B1:D3:66:D5
Certificate issuer: /CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Certificate serial: 019B78A264E7942E42168B8FD967FAE2E3C2
Authority key identifier: 16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/1uN-f7Pe3Yoax_Gy67R47bHTZtU.roa
Signing time: Thu 01 Jan 2026 08:17:47 +0000
ROA not before: Thu 01 Jan 2026 08:17:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206983
IP address blocks: 193.228.185.0/24 maxlen: 24
193.228.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:64:e7:94:2e:42:16:8b:8f:d9:67:fa:e2:e3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Validity
Not Before: Jan 1 08:17:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6e37e7fb3dedd8a1ac7f1b2ebb478edb1d366d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a8:9f:c4:55:76:6c:e1:96:71:23:d9:c6:70:
8f:89:db:2d:cb:f1:74:b6:32:58:85:b4:82:0d:9f:
bb:d0:ca:62:cc:90:5f:d2:04:3f:ac:42:34:c0:5e:
63:40:d7:db:7b:66:a8:c1:35:3b:9e:47:e2:22:b7:
7d:b4:a6:4d:db:24:79:52:b7:78:3c:52:ac:80:17:
5c:89:4a:76:b2:da:fb:53:ca:94:de:cb:57:04:1d:
f0:ac:63:90:7a:1e:81:e0:32:83:53:05:8b:e4:2a:
d0:6e:3f:27:ca:8f:67:14:17:e7:dc:04:4e:60:79:
d8:31:c5:84:ba:df:ec:50:aa:0c:93:f5:e9:26:3b:
ff:a6:2b:e3:ff:d1:c0:16:71:6f:ea:80:f0:f0:92:
b2:67:f7:fb:01:17:22:d4:c3:e8:d7:e3:18:cf:ab:
68:92:84:cc:43:c9:50:fc:d7:5f:b0:d2:aa:ac:b5:
01:82:22:88:93:c8:39:3e:55:fe:3f:90:97:d7:a8:
57:78:8a:5a:cd:a6:57:c7:8b:75:fe:47:5f:38:16:
ec:10:e4:49:c6:ea:5d:58:f8:f0:40:9f:23:ab:b0:
62:cf:7e:fe:26:2c:1a:a0:20:26:66:0c:82:97:72:
03:ab:0c:bf:e6:60:a7:89:82:9d:6e:72:96:5a:33:
78:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E3:7E:7F:B3:DE:DD:8A:1A:C7:F1:B2:EB:B4:78:ED:B1:D3:66:D5
X509v3 Authority Key Identifier:
keyid:16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/1uN-f7Pe3Yoax_Gy67R47bHTZtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.185.0-193.228.186.255
Signature Algorithm: sha256WithRSAEncryption
5f:74:54:96:b4:d4:0b:f0:d3:fb:6b:ba:e7:da:55:e1:1e:ee:
98:79:70:66:00:35:84:a5:a2:1d:1b:f4:61:6e:9c:3d:0f:30:
4b:a7:7f:6f:a5:57:31:25:fc:b5:05:36:8b:30:f4:65:21:62:
3d:d4:2c:20:83:6c:32:b6:30:a3:49:f9:fb:90:50:09:b7:1f:
dd:31:3d:98:94:7c:08:d6:63:43:54:82:b4:a0:6f:a5:e3:b4:
06:b5:c3:ab:7d:9b:9c:06:0f:d2:3d:13:61:8a:96:b5:ae:e2:
00:2d:b8:2e:dd:fe:02:40:6b:98:36:55:92:51:f7:aa:e2:0a:
42:2b:44:58:b2:dc:ee:13:86:71:74:4c:8d:79:af:12:1f:1b:
46:44:6b:e5:c1:ac:f6:00:6d:eb:ef:66:3f:f6:f7:56:cd:75:
0d:3b:60:44:45:76:6e:f8:d5:bb:54:4a:7a:83:b6:01:1f:e8:
63:c5:48:60:a3:3b:98:b7:5e:1b:c3:3e:0e:20:e8:b8:a1:fe:
89:b7:50:2b:4b:ee:29:56:b6:a8:64:02:7b:e3:15:6d:69:a7:
56:ed:19:70:6f:4d:5f:f1:5a:52:96:86:e8:f2:b1:d2:54:db:
25:7c:eb:9f:be:27:9f:ad:f7:5c:86:e5:b2:3b:8f:d1:14:c1:
63:2d:1a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:08:04 2026 by rpki-client